FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
This article describes that rules queues are not getting cleared when data is continuously ingested, which generates a workflow queue and causes a performance impact on the FortiSOAR system.
Scope
Fresh installations of FortiSOAR 7.2.0. Note: This issue does not occur on systems that have upgraded to FortiSOAR release 7.2.0.
Solution
To ensure that the rules queue gets cleared when resources are used for workflow execution, run the 'fsr-queues-performance-issue-patch.py' script on the FortiSOAR 7.2.0 system:
1) SSH to the FortiSOAR VM and log in as a root user.
2) Download the script from the repository server using the following command:
